[ale] Known SSH exploits?
Dow Hurst
dhurst at kennesaw.edu
Mon Oct 14 12:16:15 EDT 2002
As a client of Bob's, I can tell you that when he gets time to read
this, he is going to be shaking his head in despair at your security
people! ;-) Actually, for our installation he recommended using the
ssh.org version and not openssh. Also, we stuck with version 2 of the
SSH protocol and didn't support version 1. Since the licensing is
favorable for us on the ssh.org version, ie. free, we have not had any
worries with the problems cropping up in OpenSSH. OpenSSH is still
going thru growing pains so we didn't want to bank on it yet.
Dow
Jeff Layton wrote:
>Good morning,
>
> Corporate security where I work (who shall remain nameless
>for the moment :) has decreed that SSH is to be outlawed because
>there are known exploits. I'm starting to do a little investigation
>on this issue, but I know there are some security experts on the
>list who might be able to shed some light on this (Bob T. are you
>there? :)
> Just to add a little comedy to your morning, SSH is outlawed,
>but telnet is allowed and encouraged.
>
>
>TIA,
>
>Jeff
>
>
>--
>
>Jeff Layton
>Senior Engineer
>Lockheed-Martin Aeronautical Company - Marietta
>email: jeffrey.b.layton at lmco.com
>
>"Is it possible to overclock a cattle prod?" - Irv Mullins
>
>This email may contain confidential information. If you have received this
>email in error, please delete it immediately, and inform me of the mistake by
>return email. Any form of reproduction, or further dissemination of this
>email is strictly prohibited. Also, please note that opinions expressed in
>this email are those of the author, and are not necessarily those of the
>Lockheed-Martin Corporation.
>
>
>
>
>---
>This message has been sent through the ALE general discussion list.
>See http://www.ale.org/mailing-lists.shtml for more info. Problems should be
>sent to listmaster at ale dot org.
>
>
>
>
--
__________________________________________________________
Dow Hurst Office: 770-499-3428
Systems Support Specialist Fax: 770-423-6744
1000 Chastain Rd., Bldg. 12
Chemistry Department SC428 Email:dhurst at kennesaw.edu
Kennesaw State University Dow.Hurst at mindspring.com
Kennesaw, GA 30144
*********************************
*Computational Chemistry is fun!*
*********************************
---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be
sent to listmaster at ale dot org.
More information about the Ale
mailing list